This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3234382e302f32322d3232203d3e20313333373938.roa
File: 3230332e3132382e3234382e302f32322d3232203d3e20313333373938.roa (raw, json)
Hash identifier: TpQqENPCKg36dQXIyXSXZdNl9EAhROMOEV0NrLYhyRE=
Subject key identifier: 3D:D8:B3:34:0D:A6:29:06:F9:56:17:CF:17:F9:EC:CC:B8:61:0A:FE
Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial: 61FA2BA6CFBDB1B35ED7169845FA15843AFF92D0
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3234382e302f32322d3232203d3e20313333373938.roa
Signing time: Wed 10 Dec 2025 04:02:32 +0000
ROA not before: Wed 10 Dec 2025 03:57:32 +0000
ROA not after: Wed 09 Dec 2026 04:02:32 +0000
asID: 133798
IP address blocks: 203.128.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Dec 2025 00:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:fa:2b:a6:cf:bd:b1:b3:5e:d7:16:98:45:fa:15:84:3a:ff:92:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Validity
Not Before: Dec 10 03:57:32 2025 GMT
Not After : Dec 9 04:02:32 2026 GMT
Subject: CN=3DD8B3340DA62906F95617CF17F9ECCCB8610AFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:55:42:1c:0a:2d:42:90:59:5a:42:17:fe:
f1:42:1d:91:1a:fa:bc:75:eb:61:1d:cb:73:e9:fb:
73:3b:c3:74:79:87:d2:ea:54:81:94:8e:78:11:de:
13:e4:df:16:96:7b:ca:47:92:6f:8c:93:cf:92:07:
70:78:2d:03:48:90:a6:68:f1:4e:2a:eb:a2:5e:10:
e8:11:ee:e8:05:43:e5:50:01:0c:ee:8a:53:c3:7e:
49:5c:1a:99:08:39:53:73:09:0a:cc:97:11:b4:46:
67:6e:65:9b:c4:ee:76:99:14:52:32:b6:78:dd:83:
a2:7f:ba:54:50:37:ce:a0:29:7c:e9:11:80:16:33:
2d:35:84:b7:5e:0b:50:ab:6a:33:b2:51:a8:9c:7f:
d6:b0:a0:74:54:7e:3e:be:94:e7:52:3a:15:6a:fe:
e3:b7:0e:0d:7e:07:a4:97:fc:0e:e4:e0:9c:57:42:
6c:41:df:ae:c6:bc:cd:bc:2d:93:e4:ec:a1:83:83:
d1:38:b9:cf:0c:9e:1e:35:4f:53:bc:b1:9b:59:f9:
99:59:34:d9:22:53:18:73:62:a3:52:40:ae:1a:70:
75:d0:f4:98:6b:6d:d3:d4:3b:76:bd:02:fb:6c:68:
b5:50:9a:fc:58:0c:02:42:6c:e5:a9:ec:84:00:39:
98:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D8:B3:34:0D:A6:29:06:F9:56:17:CF:17:F9:EC:CC:B8:61:0A:FE
X509v3 Authority Key Identifier:
keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3234382e302f32322d3232203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.128.248.0/22
Signature Algorithm: sha256WithRSAEncryption
53:b5:d2:ca:69:b5:ad:57:db:37:ac:6a:f7:a0:63:40:f4:15:
45:15:f9:10:24:47:99:6e:41:e9:45:e7:62:3b:89:87:cd:9c:
44:0b:59:2f:eb:ad:5a:bc:a8:69:3a:62:3b:e6:a8:ba:7e:0d:
10:02:f1:ed:8d:57:76:02:76:68:aa:4f:a2:19:15:6f:a8:7a:
af:3a:9b:1c:13:4a:cc:da:2b:95:83:e0:e2:d6:f4:08:e8:6e:
b5:a7:2f:08:29:d5:e8:04:c1:e3:bd:1f:12:5a:a5:5b:a2:78:
08:a9:0b:45:db:e6:ed:8a:0e:1a:2a:9d:e5:15:93:3a:48:bf:
aa:f4:32:1e:fb:8a:4c:9c:c7:81:49:b5:c2:39:c5:e6:08:3f:
a3:3b:ab:b8:c6:89:f5:0f:90:da:5d:29:55:c7:e7:f5:aa:46:
95:5b:c0:8c:ee:d5:3b:c0:84:7f:30:4b:5f:80:c2:50:a7:f4:
3f:eb:2d:ba:84:86:b5:4e:3b:4d:e6:d0:f8:63:83:e0:2e:6a:
e1:d1:1b:b5:7a:27:39:67:bd:8b:d8:5f:7b:d9:3e:6d:d8:7c:
fa:c7:8a:ed:5d:c8:e8:22:41:8f:b4:39:87:21:f4:31:4e:da:
a7:19:33:f6:be:34:24:cc:46:c0:a3:b9:91:1f:5f:1a:e0:3a:
f5:58:f1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 14:38:22 2025 by rpki-client